Blockstream Enterprise · Report

Rehypothecation: The Risk Hiding in Plain Sight

Re-used client assets are the common thread in many of the most damaging institutional crypto failures. This report explains what rehypothecation is, where it hides across custody, lending, and yield, and how a verifiable architecture removes it.

Reading time: 6 min · Topics: Custody · Lending · BTCfi

What rehypothecation is

In traditional finance, rehypothecation is when a broker or custodian re-uses assets a client has pledged — as collateral for its own borrowing, to fund another client's position, or to generate yield. Within disclosed limits, it is a normal part of prime brokerage. In crypto it has often happened without those limits, without disclosure, and without reserves to back it. The balance on the statement stays the same; the asset behind it does not.

The largest losses of the last cycle were not break-ins. The assets were lent out the front door.

Why it is hard to see

Rehypothecation does not appear on a customer statement. Your balance shows the full amount. What it cannot show is whether that same Bitcoin is simultaneously pledged somewhere else. The exposure stays invisible until a redemption wave forces it into the open — and by then recovery is a bankruptcy claim, not a withdrawal. Several of the most damaging institutional crypto failures followed this pattern, and each shared the same root cause: client assets that were not actually there.

Where it hides

Rehypothecation is not one product's problem. It recurs across the institutional Bitcoin stack, wherever a third party takes control of assets it does not own.

In custody

A custodian earns extra return by lending out the assets it holds for clients, or pledges them to cover a shortfall elsewhere on its book. The client sees an unchanged balance. The fix is structural: segregated accounts so assets are never pooled, and on-chain proof of reserves so each client can confirm their holdings are present and unencumbered without the custodian's cooperation.

In lending

Collateral posted against a loan is re-pledged down a chain of counterparties, so a single default can cascade. Rehypothecation-free lending — the model behind investment-grade structures and lenders such as Sygnum — keeps collateral isolated and verifiable on-chain for the life of the loan.

In yield and BTCfi

A headline yield is often funded by lending your Bitcoin out to support someone else's trade. The return is real until the borrower fails. Custody-protected yield keeps assets in qualified custody while they earn, so the source of yield is transparent and the principal is never the funding.

How a verifiable architecture removes it

Preventing rehypothecation by policy depends on a provider keeping a promise you cannot check. Preventing it by architecture means the assets can be independently verified as present and unused at any time. Blockstream Enterprise is built on the latter.

The four structural controls
  • Segregated accounts. Client assets are never pooled into an omnibus wallet, so they cannot be quietly cross-used.
  • On-chain proof of reserves. Balances are verifiable on-chain, independently of any vendor attestation.
  • Keys under your control. Hardware-rooted multisig means assets cannot move — or be lent — without your signature.
  • No rehypothecation by design. A structural property of the architecture, not a clause in a contract.

What to ask your provider

If you hold, lend, or earn yield on Bitcoin through a third party, a short set of questions surfaces the risk. A provider that cannot answer them on-chain is a provider that can rehypothecate.

  • Can my assets be lent, staked, or pledged without my signature?
  • Can I verify my balance on-chain without your cooperation?
  • Are client accounts segregated, or pooled into an omnibus wallet?
  • Is collateral ever re-pledged to another counterparty?
  • Where does any yield actually come from, and do my assets leave custody to earn it?

See how Blockstream Enterprise removes the risk

Contact Us